使用NetNamedPipeBinding在Windows服务上托管的Wcf服务的安全性

Question

我已经创建了一个WCF服务，该服务通过NetNamedPipeBinding协议托管在Windows服务上，现在我想为该服务提供安全性，因为只有已知用户名和密码的用户才能访问该服务，那么我该如何提供方法级别的身份验证用户访问此服务？

Answer 1

NetNamedPipe binding doesn't support message level security out of the box. That would require custom binding. NetNamedPipe binding works only when both service and client are running on the same machine so there is assumption that if user has permissions to log in and the service is running she have also permission to call it. If you need to restrict users who can call the service you can always use custom authorization manager or role based security .